Problem Note 65548: SAS® Visual Analytics reports embedded in inline frames (iframes) stop working after browser updates that enforce SameSite cookies more strictly
SAS Visual Analytics reports that are embedded in an inline frame (iframe) might fail in various ways after your browser is updated to enforce SameSite cookie settings more strictly. Notably, the Google Chrome 80 update in February 2020 has changed the default settings in relation to SameSite cookies. This change can introduce failures. (For more information, see https://www.chromium.org/updates/same-site.)
When this problem exists, the SAS Visual Analytics report might stop responding while loading, or the report might redirect you to the logon page instead of opening. Typically, this problem occurs when the domain of the page that contains the iframe does not match the domain of the SAS Visual Analytics applications.
If you believe that you are encountering this issue, you can confirm this by enabling the Chrome developer tools. If the report is impacted by this issue, you see a message that is similar to the following in the console logging:
A cookie associated with a cross-site resource at http://sas.com/ was set
without the 'SameSite' attribute. It has been blocked, as Chrome now only
delivers cookies with cross-site requests if they are set with 'SameSite=None' and 'Secure'.
You can review cookies in developer tools under Application>Storage>Cookies and see more details at
https://www.chromestatus.com/feature/5088147346030592 and https://www.chromestatus.com/feature/5633521622188032.
Click the Hot Fix tab in this note for a link to instructions about accessing and applying the software update.
Operating System and Release Information
SAS System | SAS Visual Analytics | Microsoft® Windows® for x64 | 7.3 | | 9.4 TS1M3 | |
Linux for x64 | 7.3 | | 9.4 TS1M3 | |
SAS System | SAS Visual Analytics (on SAS Viya) | Cloud Foundry | 8.2 | | Viya | |
Linux for x64 | 8.2 | | Viya | |
*
For software releases that are not yet generally available, the Fixed
Release is the software release in which the problem is planned to be
fixed.
Additional browser security, such as the Google Chrome 80 update in February 2020, might cause SAS Visual Analytics reports that are embedded in iframes to stop working. The report might stop responding, or you might be redirected to the logon page.
Type: | Problem Note |
Priority: | high |
Date Modified: | 2021-03-23 14:35:27 |
Date Created: | 2020-02-12 11:46:12 |